{"id":47315,"date":"2025-07-30T07:22:02","date_gmt":"2025-07-29T23:22:02","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/47315.html"},"modified":"2025-07-30T07:22:02","modified_gmt":"2025-07-29T23:22:02","slug":"%e7%94%a8linux%ef%bc%88%e9%ba%92%e9%ba%9f%ef%bc%89%e6%9c%8d%e5%8a%a1%e5%99%a8%e8%87%aa%e7%ad%be%e8%af%81%e4%b9%a6%ef%bc%8c%e7%94%9f%e6%88%90iis%e8%af%81%e4%b9%a6%e5%8f%8apem%e8%af%81%e4%b9%a6%e8%af%a6","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/47315.html","title":{"rendered":"\u7528Linux\uff08\u9e92\u9e9f\uff09\u670d\u52a1\u5668\u81ea\u7b7e\u8bc1\u4e66\uff0c\u751f\u6210IIS\u8bc1\u4e66\u53caPEM\u8bc1\u4e66\u8be6\u7ec6\u5168\u6d41\u7a0b"},"content":{"rendered":"<p>\u597d\u7684&#xff0c;\u4ee5\u4e0b\u662f\u57fa\u4e8e\u9e92\u9e9f Linux \u7cfb\u7edf\u751f\u6210\u81ea\u7b7e\u8bc1\u4e66&#xff0c;\u5e76\u5c06\u5176\u8f6c\u6362\u4e3a\u9002\u7528\u4e8e IIS \u7684 .pfx \u6587\u4ef6\u4ee5\u53ca .pem \u6587\u4ef6\u7684\u8be6\u7ec6\u6b65\u9aa4&#xff1a;<\/p>\n<h4>\u4e00\u3001\u5728\u9e92\u9e9f Linux \u4e0a\u5b89\u88c5 OpenSSL<\/h4>\n<h5>1. \u68c0\u67e5\u7cfb\u7edf\u81ea\u5e26\u7684 OpenSSL \u7248\u672c<\/h5>\n<p>\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\u68c0\u67e5\u7cfb\u7edf\u662f\u5426\u5df2\u5b89\u88c5 OpenSSL \u53ca\u5176\u7248\u672c&#xff1a;<\/p>\n<p>openssl version<\/p>\n<p>\u5982\u679c\u7cfb\u7edf\u5df2\u5b89\u88c5 OpenSSL&#xff0c;\u4f46\u7248\u672c\u8f83\u65e7&#xff0c;\u6216\u8005\u9700\u8981\u66f4\u9ad8\u7248\u672c\u7684 OpenSSL&#xff0c;\u53ef\u4ee5\u624b\u52a8\u5b89\u88c5\u3002<\/p>\n<h5>2. \u5b89\u88c5 OpenSSL<\/h5>\n<p>\u6839\u636e\u641c\u7d22\u7ed3\u679c&#xff0c;\u4ee5\u4e0b\u662f\u9002\u7528\u4e8e\u9e92\u9e9f Linux \u7684 OpenSSL \u5b89\u88c5\u65b9\u6cd5&#xff1a;<\/p>\n<h6>\u65b9\u6cd5\u4e00&#xff1a;\u76f4\u63a5\u5b89\u88c5\u7cfb\u7edf\u81ea\u5e26\u7684 OpenSSL&#xff08;\u5982\u679c\u7cfb\u7edf\u81ea\u5e26\u7248\u672c\u6ee1\u8db3\u9700\u6c42&#xff09;<\/h6>\n<p><span class=\"token function\">sudo<\/span> yum <span class=\"token function\">install<\/span> openssl<\/p>\n<h6>\u65b9\u6cd5\u4e8c&#xff1a;\u4ece\u6e90\u7801\u7f16\u8bd1\u5b89\u88c5\u6700\u65b0\u7248\u672c\u7684 OpenSSL&#xff08;\u5982\u679c\u9700\u8981\u66f4\u9ad8\u7248\u672c&#xff09;<\/h6>\n<li>\n<p>\u4e0b\u8f7d OpenSSL \u6e90\u7801<\/p>\n<ul>\n<li>\u4ece OpenSSL \u5b98\u65b9\u7f51\u7ad9\u4e0b\u8f7d\u6e90\u7801\u5305&#xff0c;\u4f8b\u5982 OpenSSL 3.0.10&#xff1a;<span class=\"token function\">wget<\/span> https:\/\/www.openssl.org\/source\/openssl-3.0.10.tar.gz\n <\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u89e3\u538b\u6e90\u7801\u5305<\/p>\n<p> <span class=\"token function\">tar<\/span> -zxvf openssl-3.0.10.tar.gz<br \/>\n<span class=\"token builtin class-name\">cd<\/span> openssl-3.0.10\n <\/li>\n<li>\n<p>\u914d\u7f6e\u5b89\u88c5\u8def\u5f84<\/p>\n<p> .\/config &#8211;prefix<span class=\"token operator\">&#061;<\/span>\/usr\/local\/openssl &#8211;openssldir<span class=\"token operator\">&#061;<\/span>\/usr\/local\/openssl shared zlib\n <\/li>\n<li>\n<p>\u7f16\u8bd1\u5e76\u5b89\u88c5<\/p>\n<p> <span class=\"token function\">make<\/span> -j4<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">make<\/span> <span class=\"token function\">install<\/span>\n <\/li>\n<li>\n<p>\u6e05\u7406\u65e7\u7248\u672c\u6587\u4ef6<\/p>\n<p> <span class=\"token function\">sudo<\/span> <span class=\"token function\">rm<\/span> -rf \/usr\/bin\/openssl<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">rm<\/span> -rf \/usr\/include\/openssl<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">rm<\/span> -rf \/usr\/lib64\/libssl.so<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">rm<\/span> -rf \/usr\/lib64\/libcrypto.so<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">rm<\/span> -rf \/usr\/lib\/libssl.so<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">rm<\/span> -rf \/usr\/lib\/libcrypto.so\n <\/li>\n<li>\n<p>\u5efa\u7acb\u8f6f\u94fe\u63a5<\/p>\n<p> <span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> -s \/usr\/local\/openssl\/bin\/openssl \/usr\/bin\/openssl<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> -s \/usr\/local\/openssl\/lib\/libssl.so \/usr\/lib\/libssl.so<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> -s \/usr\/local\/openssl\/lib\/libssl.so \/usr\/lib64\/libssl.so<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> -s \/usr\/local\/openssl\/lib\/libcrypto.so \/usr\/lib\/libcrypto.so<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> -s \/usr\/local\/openssl\/lib\/libcrypto.so \/usr\/lib64\/libcrypto.so<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> -s \/usr\/local\/openssl\/lib\/libssl.so.3 \/usr\/lib\/libssl.so.3<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> -s \/usr\/local\/openssl\/lib\/libssl.so.3 \/usr\/lib64\/libssl.so.3<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> -s \/usr\/local\/openssl\/lib\/libcrypto.so.3 \/usr\/lib64\/libcrypto.so.3<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> -s \/usr\/local\/openssl\/lib\/libcrypto.so.3 \/usr\/lib\/libcrypto.so.3\n <\/li>\n<li>\n<p>\u9a8c\u8bc1\u5b89\u88c5<\/p>\n<p> openssl version<\/p>\n<p>\u5982\u679c\u663e\u793a\u5b89\u88c5\u7684\u7248\u672c\u53f7&#xff08;\u5982 OpenSSL 3.0.10&#xff09;&#xff0c;\u5219\u8bf4\u660e\u5b89\u88c5\u6210\u529f\u3002<\/p>\n<\/li>\n<h4>\u4e8c\u3001\u751f\u6210\u81ea\u7b7e\u8bc1\u4e66<\/h4>\n<h5>1. \u521b\u5efa\u8bc1\u4e66\u5b58\u50a8\u76ee\u5f55<\/h5>\n<p><span class=\"token function\">sudo<\/span> <span class=\"token function\">mkdir<\/span> -p \/etc\/ssl\/mycerts<br \/>\n<span class=\"token builtin class-name\">cd<\/span> \/etc\/ssl\/mycerts<\/p>\n<h5>2. \u751f\u6210\u79c1\u94a5<\/h5>\n<p>\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\u751f\u6210\u4e00\u4e2a 2048 \u4f4d\u7684 RSA \u79c1\u94a5\u6587\u4ef6&#xff1a;<\/p>\n<p><span class=\"token function\">sudo<\/span> openssl genrsa -out server.key <span class=\"token number\">2048<\/span><\/p>\n<ul>\n<li>server.key \u662f\u79c1\u94a5\u6587\u4ef6\u7684\u540d\u79f0\u3002<\/li>\n<li>2048 \u8868\u793a\u5bc6\u94a5\u957f\u5ea6\u4e3a 2048 \u4f4d&#xff0c;\u8fd9\u662f\u76ee\u524d\u63a8\u8350\u7684\u5b89\u5168\u957f\u5ea6\u3002<\/li>\n<\/ul>\n<h5>3. \u751f\u6210\u81ea\u7b7e\u540d\u8bc1\u4e66<\/h5>\n<p>\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\u751f\u6210\u81ea\u7b7e\u540d\u8bc1\u4e66&#xff1a;<\/p>\n<p><span class=\"token function\">sudo<\/span> openssl req -new -x509 -days <span class=\"token number\">365<\/span> -key server.key -out server.crt<\/p>\n<ul>\n<li>-new&#xff1a;\u8868\u793a\u751f\u6210\u4e00\u4e2a\u65b0\u7684\u8bc1\u4e66\u7b7e\u540d\u8bf7\u6c42&#xff08;CSR&#xff09;\u3002<\/li>\n<li>-x509&#xff1a;\u8868\u793a\u76f4\u63a5\u751f\u6210\u81ea\u7b7e\u540d\u8bc1\u4e66\u3002<\/li>\n<li>-days 365&#xff1a;\u8868\u793a\u8bc1\u4e66\u7684\u6709\u6548\u671f\u4e3a 365 \u5929\u3002<\/li>\n<li>-key server.key&#xff1a;\u6307\u5b9a\u79c1\u94a5\u6587\u4ef6\u3002<\/li>\n<li>-out server.crt&#xff1a;\u6307\u5b9a\u751f\u6210\u7684\u8bc1\u4e66\u6587\u4ef6\u540d\u79f0\u3002<\/li>\n<\/ul>\n<p>\u5728\u6267\u884c\u4e0a\u8ff0\u547d\u4ee4\u65f6&#xff0c;\u7cfb\u7edf\u4f1a\u63d0\u793a\u8f93\u5165\u4e00\u4e9b\u4fe1\u606f&#xff0c;\u4f8b\u5982&#xff1a;<\/p>\n<ul>\n<li>Country Name (2 letter code)&#xff1a;\u56fd\u5bb6\u4ee3\u7801&#xff08;\u4e24\u4f4d\u5b57\u6bcd&#xff09;&#xff0c;\u4f8b\u5982 CN\u3002<\/li>\n<li>State or Province Name&#xff1a;\u7701\u4efd\u6216\u5dde&#xff0c;\u4f8b\u5982 Beijing\u3002<\/li>\n<li>Locality Name&#xff1a;\u57ce\u5e02&#xff0c;\u4f8b\u5982 Beijing\u3002<\/li>\n<li>Organization Name&#xff1a;\u7ec4\u7ec7\u540d\u79f0&#xff0c;\u4f8b\u5982 MyCompany\u3002<\/li>\n<li>Organizational Unit Name&#xff1a;\u90e8\u95e8\u540d\u79f0&#xff0c;\u4f8b\u5982 IT\u3002<\/li>\n<li>Common Name&#xff1a;\u57df\u540d\u6216 IP \u5730\u5740&#xff0c;\u4f8b\u5982 example.com\u3002<\/li>\n<li>Email Address&#xff1a;\u7535\u5b50\u90ae\u4ef6\u5730\u5740&#xff0c;\u4f8b\u5982 admin&#064;example.com\u3002<\/li>\n<\/ul>\n<h5>4. \u5408\u5e76\u8bc1\u4e66\u548c\u79c1\u94a5\u4e3a .pem \u6587\u4ef6<\/h5>\n<p>\u5c06\u8bc1\u4e66\u548c\u79c1\u94a5\u5408\u5e76\u4e3a\u4e00\u4e2a .pem \u6587\u4ef6&#xff1a;<\/p>\n<p><span class=\"token function\">cat<\/span> server.crt server.key <span class=\"token operator\">&gt;<\/span> server.pem<\/p>\n<ul>\n<li>server.pem \u6587\u4ef6\u4e2d\u5c06\u5305\u542b\u8bc1\u4e66\u548c\u79c1\u94a5\u7684\u5185\u5bb9&#xff0c;\u9002\u7528\u4e8e\u9700\u8981 PEM \u683c\u5f0f\u7684\u573a\u666f\u3002<\/li>\n<\/ul>\n<h4>\u4e09\u3001\u5c06\u8bc1\u4e66\u8f6c\u6362\u4e3a .pfx \u683c\u5f0f&#xff08;\u9002\u7528\u4e8e IIS&#xff09;<\/h4>\n<h5>1. \u751f\u6210 .pfx \u6587\u4ef6<\/h5>\n<p>\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\u5c06 PEM \u683c\u5f0f\u7684\u8bc1\u4e66\u548c\u79c1\u94a5\u8f6c\u6362\u4e3a .pfx \u6587\u4ef6&#xff1a;<\/p>\n<p>openssl pkcs12 -export -out server.pfx -in server.crt -inkey server.key<\/p>\n<ul>\n<li>-export&#xff1a;\u8868\u793a\u5bfc\u51fa\u4e3a PKCS#12 \u683c\u5f0f\u3002<\/li>\n<li>-out server.pfx&#xff1a;\u6307\u5b9a\u8f93\u51fa\u7684 .pfx \u6587\u4ef6\u540d\u79f0\u3002<\/li>\n<li>-in server.crt&#xff1a;\u6307\u5b9a\u8bc1\u4e66\u6587\u4ef6\u3002<\/li>\n<li>-inkey server.key&#xff1a;\u6307\u5b9a\u79c1\u94a5\u6587\u4ef6\u3002<\/li>\n<\/ul>\n<p>\u5728\u6267\u884c\u6b64\u547d\u4ee4\u65f6&#xff0c;\u7cfb\u7edf\u4f1a\u63d0\u793a\u8f93\u5165\u4e00\u4e2a\u5bfc\u51fa\u5bc6\u7801&#xff0c;\u7528\u4e8e\u4fdd\u62a4 .pfx \u6587\u4ef6\u3002\u8bf7\u8bb0\u4f4f\u8fd9\u4e2a\u5bc6\u7801&#xff0c;\u540e\u7eed\u5728 IIS \u4e2d\u5bfc\u5165\u8bc1\u4e66\u65f6\u4f1a\u7528\u5230\u3002<\/p>\n<h5>2. \u5c06 .pfx \u6587\u4ef6\u4f20\u8f93\u5230 Windows \u670d\u52a1\u5668<\/h5>\n<p>\u5c06\u751f\u6210\u7684 server.pfx \u6587\u4ef6\u4ece\u9e92\u9e9f Linux \u670d\u52a1\u5668\u4f20\u8f93\u5230\u8fd0\u884c IIS \u7684 Windows \u670d\u52a1\u5668\u4e0a\u3002\u53ef\u4ee5\u4f7f\u7528\u6587\u4ef6\u4f20\u8f93\u5de5\u5177&#xff08;\u5982 WinSCP&#xff09;\u6216\u901a\u8fc7\u7f51\u7edc\u5171\u4eab\u7b49\u65b9\u5f0f\u5b8c\u6210\u4f20\u8f93\u3002<\/p>\n<h4>\u56db\u3001\u5728 IIS \u4e2d\u5bfc\u5165 .pfx \u8bc1\u4e66<\/h4>\n<h5>1. \u6253\u5f00 IIS \u7ba1\u7406\u5668<\/h5>\n<p>\u5728 Windows \u670d\u52a1\u5668\u4e0a&#xff0c;\u6253\u5f00 IIS \u7ba1\u7406\u5668&#xff1a;<\/p>\n<ul>\n<li>\u5728\u201c\u5f00\u59cb\u201d\u83dc\u5355\u4e2d\u641c\u7d22\u201cInternet Information Services (IIS) Manager\u201d\u5e76\u6253\u5f00\u3002<\/li>\n<\/ul>\n<h5>2. \u5bfc\u5165\u8bc1\u4e66<\/h5>\n<li>\u5728 IIS \u7ba1\u7406\u5668\u4e2d&#xff0c;\u9009\u62e9\u670d\u52a1\u5668\u8282\u70b9\u3002<\/li>\n<li>\u5728\u53f3\u4fa7\u7684\u201c\u64cd\u4f5c\u201d\u9762\u677f\u4e2d&#xff0c;\u70b9\u51fb\u201c\u670d\u52a1\u5668\u8bc1\u4e66\u201d\u3002<\/li>\n<li>\u5728\u201c\u670d\u52a1\u5668\u8bc1\u4e66\u201d\u9875\u9762\u4e2d&#xff0c;\u70b9\u51fb\u53f3\u4fa7\u7684\u201c\u5bfc\u5165\u201d\u6309\u94ae\u3002<\/li>\n<li>\u5728\u5f39\u51fa\u7684\u201c\u5bfc\u5165\u8bc1\u4e66\u201d\u5bf9\u8bdd\u6846\u4e2d&#xff1a;\n<ul>\n<li>\u6d4f\u89c8\u5e76\u9009\u62e9\u4e4b\u524d\u4f20\u8f93\u8fc7\u6765\u7684 server.pfx \u6587\u4ef6\u3002<\/li>\n<li>\u8f93\u5165\u4e4b\u524d\u8bbe\u7f6e\u7684\u5bfc\u51fa\u5bc6\u7801\u3002<\/li>\n<li>\u70b9\u51fb\u201c\u786e\u5b9a\u201d\u5b8c\u6210\u8bc1\u4e66\u5bfc\u5165\u3002<\/li>\n<\/ul>\n<\/li>\n<h5>3. \u5c06\u8bc1\u4e66\u7ed1\u5b9a\u5230\u7f51\u7ad9<\/h5>\n<li>\u5728 IIS \u7ba1\u7406\u5668\u4e2d&#xff0c;\u5c55\u5f00\u670d\u52a1\u5668\u8282\u70b9&#xff0c;\u627e\u5230\u5e76\u9009\u62e9\u9700\u8981\u7ed1\u5b9a\u8bc1\u4e66\u7684\u7f51\u7ad9\u3002<\/li>\n<li>\u5728\u53f3\u4fa7\u7684\u201c\u64cd\u4f5c\u201d\u9762\u677f\u4e2d&#xff0c;\u70b9\u51fb\u201c\u7ed1\u5b9a\u201d\u6309\u94ae\u3002<\/li>\n<li>\u5728\u5f39\u51fa\u7684\u201c\u7f51\u7ad9\u7ed1\u5b9a\u201d\u5bf9\u8bdd\u6846\u4e2d&#xff0c;\u70b9\u51fb\u201c\u6dfb\u52a0\u201d\u6309\u94ae\u3002<\/li>\n<li>\u5728\u201c\u6dfb\u52a0\u7f51\u7ad9\u7ed1\u5b9a\u201d\u5bf9\u8bdd\u6846\u4e2d&#xff1a;\n<ul>\n<li>\u7c7b\u578b&#xff1a;\u9009\u62e9 https\u3002<\/li>\n<li>IP\u5730\u5740&#xff1a;\u901a\u5e38\u9009\u62e9 \u6240\u6709\u672a\u5206\u914d\u3002<\/li>\n<li>\u7aef\u53e3&#xff1a;\u8f93\u5165 443\u3002<\/li>\n<li>SSL\u8bc1\u4e66&#xff1a;\u5728\u4e0b\u62c9\u5217\u8868\u4e2d&#xff0c;\u9009\u62e9\u521a\u521a\u5bfc\u5165\u7684\u8bc1\u4e66\u3002<\/li>\n<\/ul>\n<\/li>\n<li>\u70b9\u51fb\u201c\u786e\u5b9a\u201d\u5b8c\u6210\u7ed1\u5b9a\u3002<\/li>\n<h5>4. \u9a8c\u8bc1\u914d\u7f6e<\/h5>\n<p>\u542f\u52a8 IIS \u7f51\u7ad9&#xff0c;\u786e\u4fdd\u7f51\u7ad9\u80fd\u591f\u6b63\u5e38\u8fd0\u884c\u3002<\/p>\n<ul>\n<li>\u6253\u5f00\u6d4f\u89c8\u5668&#xff0c;\u8bbf\u95ee https:\/\/&lt;\u4f60\u7684\u670d\u52a1\u5668IP\u6216\u57df\u540d&gt;\u3002\u7531\u4e8e\u662f\u81ea\u7b7e\u540d\u8bc1\u4e66&#xff0c;\u6d4f\u89c8\u5668\u4f1a\u5f39\u51fa\u5b89\u5168\u8b66\u544a&#xff0c;\u63d0\u793a\u8bc1\u4e66\u4e0d\u53d7\u4fe1\u4efb\u3002\u53ef\u4ee5\u70b9\u51fb\u201c\u9ad8\u7ea7\u201d\u9009\u9879&#xff0c;\u7136\u540e\u9009\u62e9\u201c\u7ee7\u7eed\u524d\u5f80&lt;\u4f60\u7684\u670d\u52a1\u5668IP\u6216\u57df\u540d&gt;&#xff08;\u4e0d\u5b89\u5168&#xff09;\u201d&#xff0c;\u4ee5\u67e5\u770b\u7f51\u7ad9\u662f\u5426\u80fd\u591f\u901a\u8fc7 HTTPS \u6b63\u5e38\u8bbf\u95ee\u3002<\/li>\n<\/ul>\n<h4>\u4e94\u3001\u6ce8\u610f\u4e8b\u9879<\/h4>\n<h5>1. \u8bc1\u4e66\u4fe1\u4efb\u95ee\u9898<\/h5>\n<ul>\n<li>\u81ea\u7b7e\u540d\u8bc1\u4e66\u4e0d\u4f1a\u88ab\u6d4f\u89c8\u5668\u9ed8\u8ba4\u4fe1\u4efb&#xff0c;\u56e0\u6b64\u5728\u6d4f\u89c8\u5668\u4e2d\u8bbf\u95ee\u65f6\u4f1a\u663e\u793a\u5b89\u5168\u8b66\u544a\u3002\u5982\u679c\u9700\u8981\u5728\u751f\u4ea7\u73af\u5883\u4e2d\u4f7f\u7528&#xff0c;\u5efa\u8bae\u8d2d\u4e70\u7531\u53d7\u4fe1\u4efb\u7684\u8bc1\u4e66\u9881\u53d1\u673a\u6784&#xff08;CA&#xff09;\u7b7e\u53d1\u7684\u8bc1\u4e66\u3002<\/li>\n<li>\u5982\u679c\u4ec5\u7528\u4e8e\u6d4b\u8bd5\u6216\u5185\u7f51\u73af\u5883&#xff0c;\u53ef\u4ee5\u901a\u8fc7\u5c06\u81ea\u7b7e\u540d\u8bc1\u4e66\u7684\u6839\u8bc1\u4e66\u5bfc\u5165\u5230\u5ba2\u6237\u7aef\u8bbe\u5907\u7684\u53d7\u4fe1\u4efb\u8bc1\u4e66\u5b58\u50a8\u4e2d&#xff0c;\u6765\u89e3\u51b3\u4fe1\u4efb\u95ee\u9898\u3002<\/li>\n<\/ul>\n<h5>2. \u8bc1\u4e66\u6709\u6548\u671f<\/h5>\n<ul>\n<li>\u5728\u751f\u6210\u81ea\u7b7e\u540d\u8bc1\u4e66\u65f6&#xff0c;\u53ef\u4ee5\u901a\u8fc7 -days \u53c2\u6570\u8bbe\u7f6e\u8bc1\u4e66\u7684\u6709\u6548\u671f\u3002\u4f8b\u5982&#xff0c;-days 730 \u8868\u793a\u8bc1\u4e66\u6709\u6548\u671f\u4e3a 2 \u5e74\u3002<\/li>\n<\/ul>\n<h5>3. \u5b89\u5168\u8bbe\u7f6e<\/h5>\n<p>\u5728 IIS \u4e2d&#xff0c;\u53ef\u4ee5\u901a\u8fc7\u6ce8\u518c\u8868\u7f16\u8f91\u5668\u542f\u7528\u66f4\u5b89\u5168\u7684\u52a0\u5bc6\u534f\u8bae&#xff08;\u5982 TLS 1.2 \u6216 TLS 1.3&#xff09;&#xff0c;\u5e76\u7981\u7528\u5f31\u52a0\u5bc6\u5957\u4ef6\u3002\u4ee5\u4e0b\u662f\u8be6\u7ec6\u6b65\u9aa4&#xff1a;<\/p>\n<h4>&#xff08;1&#xff09;\u542f\u7528 TLS 1.2 \u548c TLS 1.3&#xff0c;\u7981\u7528 TLS 1.0 \u548c TLS 1.1<\/h4>\n<p>&#xff08;\u53ef\u53c2\u8003\u6211\u53e6\u4e00\u7bc7\u6587\u7ae0&#xff09; \u5982\u4f55\u4f7f\u7528iiscrypto<\/p>\n<h5>\u6b65\u9aa4 1&#xff1a;\u6253\u5f00\u6ce8\u518c\u8868\u7f16\u8f91\u5668<\/h5>\n<li>\u6309\u4e0b Win &#043; R \u952e&#xff0c;\u6253\u5f00\u201c\u8fd0\u884c\u201d\u5bf9\u8bdd\u6846\u3002<\/li>\n<li>\u8f93\u5165 regedit&#xff0c;\u7136\u540e\u6309 Enter \u952e\u3002<\/li>\n<li>\u5982\u679c\u7cfb\u7edf\u63d0\u793a\u201c\u7528\u6237\u8d26\u6237\u63a7\u5236\u201d&#xff0c;\u70b9\u51fb\u201c\u662f\u201d\u4ee5\u7ee7\u7eed\u3002<\/li>\n<h5>\u6b65\u9aa4 2&#xff1a;\u5bfc\u822a\u5230\u6ce8\u518c\u8868\u8def\u5f84<\/h5>\n<p>\u5728\u6ce8\u518c\u8868\u7f16\u8f91\u5668\u4e2d&#xff0c;\u5bfc\u822a\u5230\u4ee5\u4e0b\u8def\u5f84&#xff1a;<\/p>\n<p>HKEY_LOCAL_MACHINE\\\\SYSTEM\\\\CurrentControlSet\\\\Control\\\\SecurityProviders\\\\SCHANNEL\\\\Protocols<\/p>\n<h5>\u6b65\u9aa4 3&#xff1a;\u521b\u5efa\u6216\u4fee\u6539\u534f\u8bae\u5b50\u9879<\/h5>\n<p>\u5728 Protocols \u4e0b&#xff0c;\u9700\u8981\u4e3a\u6bcf\u4e2a\u534f\u8bae&#xff08;TLS 1.0\u3001TLS 1.1\u3001TLS 1.2 \u548c TLS 1.3&#xff09;\u521b\u5efa\u6216\u4fee\u6539\u5b50\u9879\u3002<\/p>\n<h6>&#xff08;a&#xff09;\u7981\u7528 TLS 1.0 \u548c TLS 1.1<\/h6>\n<p>\u5bf9\u4e8e TLS 1.0 \u548c TLS 1.1&#xff0c;\u6211\u4eec\u9700\u8981\u7981\u7528\u5b83\u4eec&#xff0c;\u56e0\u4e3a\u8fd9\u4e9b\u534f\u8bae\u88ab\u8ba4\u4e3a\u4e0d\u591f\u5b89\u5168\u3002<\/p>\n<li>\n<p>\u627e\u5230\u6216\u521b\u5efa TLS 1.0 \u548c TLS 1.1 \u5b50\u9879<\/p>\n<ul>\n<li>\u5982\u679c TLS 1.0 \u6216 TLS 1.1 \u5b50\u9879\u4e0d\u5b58\u5728&#xff0c;\u8bf7\u53f3\u952e\u70b9\u51fb Protocols&#xff0c;\u9009\u62e9\u201c\u65b0\u5efa\u201d -&gt; \u201c\u9879\u201d&#xff0c;\u5e76\u547d\u540d\u4e3a TLS 1.0 \u6216 TLS 1.1\u3002<\/li>\n<li>\u5728\u6bcf\u4e2a\u534f\u8bae\u4e0b&#xff0c;\u521b\u5efa\u4e24\u4e2a\u5b50\u9879&#xff1a;\n<ul>\n<li>Client<\/li>\n<li>Server<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u8bbe\u7f6e\u7981\u7528\u503c<\/p>\n<ul>\n<li>\u5728 Client \u548c Server \u5b50\u9879\u4e0b&#xff0c;\u5206\u522b\u521b\u5efa\u4ee5\u4e0b\u4e24\u4e2a DWORD \u503c&#xff1a;\n<ul>\n<li>DisabledByDefault&#xff1a;\u8bbe\u7f6e\u4e3a 1&#xff08;\u8868\u793a\u7981\u7528&#xff09;\u3002<\/li>\n<li>Enabled&#xff1a;\u8bbe\u7f6e\u4e3a 0&#xff08;\u8868\u793a\u7981\u7528&#xff09;\u3002<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\u5177\u4f53\u64cd\u4f5c\u5982\u4e0b&#xff1a;<\/p>\n<ul>\n<li>\u53f3\u952e\u70b9\u51fb Client \u6216 Server&#xff0c;\u9009\u62e9\u201c\u65b0\u5efa\u201d -&gt; \u201cDWORD (32-bit) \u503c\u201d\u3002<\/li>\n<li>\u8f93\u5165 DisabledByDefault&#xff0c;\u53cc\u51fb\u5b83&#xff0c;\u5c06\u5176\u503c\u8bbe\u7f6e\u4e3a 1\u3002<\/li>\n<li>\u540c\u6837&#xff0c;\u521b\u5efa Enabled&#xff0c;\u5e76\u5c06\u5176\u503c\u8bbe\u7f6e\u4e3a 0\u3002<\/li>\n<\/ul>\n<\/li>\n<h6>&#xff08;b&#xff09;\u542f\u7528 TLS 1.2 \u548c TLS 1.3<\/h6>\n<p>\u5bf9\u4e8e TLS 1.2 \u548c TLS 1.3&#xff0c;\u6211\u4eec\u9700\u8981\u542f\u7528\u5b83\u4eec\u4ee5\u786e\u4fdd\u4f7f\u7528\u66f4\u5b89\u5168\u7684\u52a0\u5bc6\u534f\u8bae\u3002<\/p>\n<li>\n<p>\u627e\u5230\u6216\u521b\u5efa TLS 1.2 \u548c TLS 1.3 \u5b50\u9879<\/p>\n<ul>\n<li>\u5982\u679c TLS 1.2 \u6216 TLS 1.3 \u5b50\u9879\u4e0d\u5b58\u5728&#xff0c;\u8bf7\u53f3\u952e\u70b9\u51fb Protocols&#xff0c;\u9009\u62e9\u201c\u65b0\u5efa\u201d -&gt; \u201c\u9879\u201d&#xff0c;\u5e76\u547d\u540d\u4e3a TLS 1.2 \u6216 TLS 1.3\u3002<\/li>\n<li>\u5728\u6bcf\u4e2a\u534f\u8bae\u4e0b&#xff0c;\u521b\u5efa\u4e24\u4e2a\u5b50\u9879&#xff1a;\n<ul>\n<li>Client<\/li>\n<li>Server<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u8bbe\u7f6e\u542f\u7528\u503c<\/p>\n<ul>\n<li>\u5728 Client \u548c Server \u5b50\u9879\u4e0b&#xff0c;\u5206\u522b\u521b\u5efa\u4ee5\u4e0b\u4e24\u4e2a DWORD \u503c&#xff1a;\n<ul>\n<li>DisabledByDefault&#xff1a;\u8bbe\u7f6e\u4e3a 0&#xff08;\u8868\u793a\u542f\u7528&#xff09;\u3002<\/li>\n<li>Enabled&#xff1a;\u8bbe\u7f6e\u4e3a 1&#xff08;\u8868\u793a\u542f\u7528&#xff09;\u3002<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\u5177\u4f53\u64cd\u4f5c\u5982\u4e0b&#xff1a;<\/p>\n<ul>\n<li>\u53f3\u952e\u70b9\u51fb Client \u6216 Server&#xff0c;\u9009\u62e9\u201c\u65b0\u5efa\u201d -&gt; \u201cDWORD (32-bit) \u503c\u201d\u3002<\/li>\n<li>\u8f93\u5165 DisabledByDefault&#xff0c;\u53cc\u51fb\u5b83&#xff0c;\u5c06\u5176\u503c\u8bbe\u7f6e\u4e3a 0\u3002<\/li>\n<li>\u540c\u6837&#xff0c;\u521b\u5efa Enabled&#xff0c;\u5e76\u5c06\u5176\u503c\u8bbe\u7f6e\u4e3a 1\u3002<\/li>\n<\/ul>\n<\/li>\n<h4>&#xff08;2&#xff09;\u91cd\u542f\u670d\u52a1\u5668<\/h4>\n<p>\u5b8c\u6210\u6ce8\u518c\u8868\u4fee\u6539\u540e&#xff0c;\u9700\u8981\u91cd\u542f\u670d\u52a1\u5668\u4ee5\u4f7f\u66f4\u6539\u751f\u6548&#xff1a;<\/p>\n<li>\u6253\u5f00\u201c\u5f00\u59cb\u201d\u83dc\u5355\u3002<\/li>\n<li>\u70b9\u51fb\u201c\u7535\u6e90\u201d\u56fe\u6807&#xff0c;\u9009\u62e9\u201c\u91cd\u542f\u201d\u3002<\/li>\n<h4>&#xff08;3&#xff09;\u9a8c\u8bc1\u914d\u7f6e<\/h4>\n<p>\u91cd\u542f\u670d\u52a1\u5668\u540e&#xff0c;\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u65b9\u6cd5\u9a8c\u8bc1 TLS \u914d\u7f6e\u662f\u5426\u751f\u6548&#xff1a;<\/p>\n<h5>\u4f7f\u7528 SSL Labs \u6d4b\u8bd5<\/h5>\n<li>\u6253\u5f00\u6d4f\u89c8\u5668&#xff0c;\u8bbf\u95ee SSL Labs \u7684 SSL Test\u3002<\/li>\n<li>\u8f93\u5165\u4f60\u7684\u670d\u52a1\u5668\u57df\u540d\u6216 IP \u5730\u5740&#xff0c;\u70b9\u51fb\u201c\u63d0\u4ea4\u201d\u3002<\/li>\n<li>\u6d4b\u8bd5\u5b8c\u6210\u540e&#xff0c;\u67e5\u770b\u62a5\u544a&#xff0c;\u786e\u8ba4\u662f\u5426\u542f\u7528\u4e86 TLS 1.2 \u548c TLS 1.3&#xff0c;\u540c\u65f6\u7981\u7528\u4e86 TLS 1.0 \u548c TLS 1.1\u3002<\/li>\n<h5>\u4f7f\u7528 PowerShell \u6d4b\u8bd5<\/h5>\n<p>\u4f60\u4e5f\u53ef\u4ee5\u4f7f\u7528 PowerShell \u811a\u672c\u6765\u6d4b\u8bd5\u670d\u52a1\u5668\u652f\u6301\u7684 TLS \u7248\u672c&#xff1a;<\/p>\n<p><span class=\"token variable\">$port<\/span> &#061; 443<br \/>\n<span class=\"token variable\">$server<\/span> &#061; <span class=\"token string\">&#034;your_server_ip_or_domain&#034;<\/span><\/p>\n<p><span class=\"token variable\">$tcpClient<\/span> &#061; <span class=\"token function\">New-Object<\/span> System<span class=\"token punctuation\">.<\/span>Net<span class=\"token punctuation\">.<\/span>Sockets<span class=\"token punctuation\">.<\/span>TcpClient<br \/>\n<span class=\"token variable\">$tcpClient<\/span><span class=\"token punctuation\">.<\/span>Connect<span class=\"token punctuation\">(<\/span><span class=\"token variable\">$server<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token variable\">$port<\/span><span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token variable\">$sslStream<\/span> &#061; <span class=\"token function\">New-Object<\/span> System<span class=\"token punctuation\">.<\/span>Net<span class=\"token punctuation\">.<\/span>Security<span class=\"token punctuation\">.<\/span>SslStream<span class=\"token punctuation\">(<\/span><span class=\"token variable\">$tcpClient<\/span><span class=\"token punctuation\">.<\/span>GetStream<span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token boolean\">$false<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token punctuation\">{<\/span><span class=\"token boolean\">$true<\/span><span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p><span class=\"token variable\">$sslProtocols<\/span> &#061; <span class=\"token namespace\">[System.Security.Authentication.SslProtocols]<\/span>::Tls12<span class=\"token punctuation\">,<\/span> <span class=\"token namespace\">[System.Security.Authentication.SslProtocols]<\/span>::Tls13<br \/>\n<span class=\"token variable\">$sslStream<\/span><span class=\"token punctuation\">.<\/span>AuthenticateAsClient<span class=\"token punctuation\">(<\/span><span class=\"token variable\">$server<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token variable\">$null<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token variable\">$sslProtocols<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token boolean\">$false<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p><span class=\"token keyword\">if<\/span> <span class=\"token punctuation\">(<\/span><span class=\"token variable\">$sslStream<\/span><span class=\"token punctuation\">.<\/span>CipherStrength <span class=\"token operator\">-gt<\/span> 0<span class=\"token punctuation\">)<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n    <span class=\"token function\">Write-Host<\/span> <span class=\"token string\">&#034;TLS 1.2 and TLS 1.3 are enabled.&#034;<\/span><br \/>\n<span class=\"token punctuation\">}<\/span> <span class=\"token keyword\">else<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n    <span class=\"token function\">Write-Host<\/span> <span class=\"token string\">&#034;TLS 1.2 and TLS 1.3 are not enabled.&#034;<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><\/p>\n<p><span class=\"token variable\">$sslStream<\/span><span class=\"token punctuation\">.<\/span>Close<span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token variable\">$tcpClient<\/span><span class=\"token punctuation\">.<\/span>Close<span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<h4>&#xff08;4&#xff09;\u7981\u7528\u4e0d\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6<\/h4>\n<p>\u9664\u4e86\u542f\u7528\u5b89\u5168\u7684 TLS \u7248\u672c\u5916&#xff0c;\u8fd8\u5e94\u7981\u7528\u4e0d\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6\u3002\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u6b65\u9aa4\u5b8c\u6210&#xff1a;<\/p>\n<li>\n<p>\u6253\u5f00\u6ce8\u518c\u8868\u7f16\u8f91\u5668&#xff1a;<\/p>\n<ul>\n<li>\u6309\u4e0b Win &#043; R \u952e&#xff0c;\u8f93\u5165 regedit&#xff0c;\u7136\u540e\u6309 Enter \u952e\u3002<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u5bfc\u822a\u5230\u4ee5\u4e0b\u8def\u5f84&#xff1a;<\/p>\n<p> HKEY_LOCAL_MACHINE\\\\SYSTEM\\\\CurrentControlSet\\\\Control\\\\SecurityProviders\\\\SCHANNEL\\\\Ciphers\n <\/li>\n<li>\n<p>\u7981\u7528\u4e0d\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6&#xff1a;<\/p>\n<ul>\n<li>\n<p>\u5728 Ciphers \u4e0b&#xff0c;\u627e\u5230\u6216\u521b\u5efa\u4ee5\u4e0b\u5b50\u9879&#xff1a;<\/p>\n<ul>\n<li>DES 56\/56<\/li>\n<li>RC2 40\/128<\/li>\n<li>RC2 56\/128<\/li>\n<li>RC4 40\/128<\/li>\n<li>RC4 56\/128<\/li>\n<li>RC4 64\/128<\/li>\n<li>Triple DES 168<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u5bf9\u4e8e\u6bcf\u4e2a\u5b50\u9879&#xff0c;\u521b\u5efa\u4e00\u4e2a DWORD \u503c&#xff1a;<\/p>\n<ul>\n<li>Enabled&#xff1a;\u8bbe\u7f6e\u4e3a 0&#xff08;\u8868\u793a\u7981\u7528&#xff09;\u3002<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<h4>&#xff08;5&#xff09;\u542f\u7528\u66f4\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6<\/h4>\n<p>\u9664\u4e86\u7981\u7528\u4e0d\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6\u5916&#xff0c;\u8fd8\u53ef\u4ee5\u901a\u8fc7 IIS \u914d\u7f6e\u6587\u4ef6\u542f\u7528\u66f4\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6\u3002\u4f8b\u5982&#xff0c;\u542f\u7528 AES \u52a0\u5bc6\u5957\u4ef6\u3002<\/p>\n<li>\n<p>\u6253\u5f00 IIS \u914d\u7f6e\u6587\u4ef6&#xff1a;<\/p>\n<ul>\n<li>\u6253\u5f00\u6587\u4ef6\u8d44\u6e90\u7ba1\u7406\u5668&#xff0c;\u5bfc\u822a\u5230\u4ee5\u4e0b\u8def\u5f84&#xff1a;C:\\\\Windows\\\\System32\\\\inetsrv\\\\config\\\\applicationHost.config\n <\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6&#xff1a;<\/p>\n<ul>\n<li>\u6253\u5f00 applicationHost.config \u6587\u4ef6&#xff0c;\u627e\u5230 &lt;system.webServer&gt; \u90e8\u5206\u3002<\/li>\n<li>\u6dfb\u52a0\u6216\u4fee\u6539\u4ee5\u4e0b\u914d\u7f6e&#xff1a;<span class=\"token tag\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;<\/span>system.webServer<\/span><span class=\"token punctuation\">&gt;<\/span><\/span><br \/>\n  <span class=\"token tag\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;<\/span>security<\/span><span class=\"token punctuation\">&gt;<\/span><\/span><br \/>\n    <span class=\"token tag\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;<\/span>access<\/span> <span class=\"token attr-name\">sslFlags<\/span><span class=\"token attr-value\"><span class=\"token punctuation attr-equals\">&#061;<\/span><span class=\"token punctuation\">&#034;<\/span>Ssl, SslNegotiateCert, SslRequireCert<span class=\"token punctuation\">&#034;<\/span><\/span> <span class=\"token punctuation\">\/&gt;<\/span><\/span><br \/>\n    <span class=\"token tag\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;<\/span>applicationDependencies<\/span><span class=\"token punctuation\">&gt;<\/span><\/span><br \/>\n      <span class=\"token tag\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;<\/span>add<\/span> <span class=\"token attr-name\">name<\/span><span class=\"token attr-value\"><span class=\"token punctuation attr-equals\">&#061;<\/span><span class=\"token punctuation\">&#034;<\/span>TLS 1.2<span class=\"token punctuation\">&#034;<\/span><\/span> <span class=\"token punctuation\">\/&gt;<\/span><\/span><br \/>\n      <span class=\"token tag\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;<\/span>add<\/span> <span class=\"token attr-name\">name<\/span><span class=\"token attr-value\"><span class=\"token punctuation attr-equals\">&#061;<\/span><span class=\"token punctuation\">&#034;<\/span>TLS 1.3<span class=\"token punctuation\">&#034;<\/span><\/span> <span class=\"token punctuation\">\/&gt;<\/span><\/span><br \/>\n    <span class=\"token tag\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;\/<\/span>applicationDependencies<\/span><span class=\"token punctuation\">&gt;<\/span><\/span><br \/>\n  <span class=\"token tag\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;\/<\/span>security<\/span><span class=\"token punctuation\">&gt;<\/span><\/span><br \/>\n<span class=\"token tag\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;\/<\/span>system.webServer<\/span><span class=\"token punctuation\">&gt;<\/span><\/span>\n <\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u4fdd\u5b58\u5e76\u91cd\u542f IIS&#xff1a;<\/p>\n<ul>\n<li>\u4fdd\u5b58\u914d\u7f6e\u6587\u4ef6\u540e&#xff0c;\u91cd\u542f IIS \u4ee5\u4f7f\u66f4\u6539\u751f\u6548&#xff1a;iisreset\n <\/li>\n<\/ul>\n<\/li>\n<h4>&#xff08;6&#xff09;\u9a8c\u8bc1\u52a0\u5bc6\u5957\u4ef6<\/h4>\n<p>\u5b8c\u6210\u914d\u7f6e\u540e&#xff0c;\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u65b9\u6cd5\u9a8c\u8bc1\u52a0\u5bc6\u5957\u4ef6\u662f\u5426\u751f\u6548&#xff1a;<\/p>\n<h5>\u4f7f\u7528 SSL Labs \u6d4b\u8bd5<\/h5>\n<li>\u6253\u5f00\u6d4f\u89c8\u5668&#xff0c;\u8bbf\u95ee SSL Labs \u7684 SSL Test\u3002<\/li>\n<li>\u8f93\u5165\u4f60\u7684\u670d\u52a1\u5668\u57df\u540d\u6216 IP \u5730\u5740&#xff0c;\u70b9\u51fb\u201c\u63d0\u4ea4\u201d\u3002<\/li>\n<li>\u6d4b\u8bd5\u5b8c\u6210\u540e&#xff0c;\u67e5\u770b\u62a5\u544a&#xff0c;\u786e\u8ba4\u662f\u5426\u542f\u7528\u4e86\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6&#xff0c;\u540c\u65f6\u7981\u7528\u4e86\u4e0d\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6\u3002<\/li>\n<h5>\u4f7f\u7528 OpenSSL \u6d4b\u8bd5<\/h5>\n<p>\u4f60\u4e5f\u53ef\u4ee5\u4f7f\u7528 OpenSSL \u547d\u4ee4\u884c\u5de5\u5177\u6d4b\u8bd5\u670d\u52a1\u5668\u652f\u6301\u7684\u52a0\u5bc6\u5957\u4ef6&#xff1a;<\/p>\n<p>openssl s_client -connect your_server_ip_or_domain:443 -tls1_2<\/p>\n<p>\u5982\u679c\u8fde\u63a5\u6210\u529f\u5e76\u663e\u793a\u652f\u6301\u7684\u52a0\u5bc6\u5957\u4ef6&#xff0c;\u5219\u8bf4\u660e\u914d\u7f6e\u751f\u6548\u3002<\/p>\n<h4>\u603b\u7ed3<\/h4>\n<p>\u901a\u8fc7\u4ee5\u4e0a\u6b65\u9aa4&#xff0c;\u4f60\u53ef\u4ee5\u5728\u9e92\u9e9f Linux \u7cfb\u7edf\u4e0a\u751f\u6210\u81ea\u7b7e\u8bc1\u4e66&#xff0c;\u5e76\u5c06\u5176\u8f6c\u6362\u4e3a\u9002\u7528\u4e8e IIS \u7684 .pfx \u6587\u4ef6\u4ee5\u53ca .pem \u6587\u4ef6\u3002\u540c\u65f6&#xff0c;\u901a\u8fc7\u5728 IIS \u4e2d\u542f\u7528\u66f4\u5b89\u5168\u7684\u52a0\u5bc6\u534f\u8bae&#xff08;\u5982 TLS 1.2 \u6216 TLS 1.3&#xff09;&#xff0c;\u5e76\u7981\u7528\u4e0d\u5b89\u5168\u7684\u534f\u8bae&#xff08;\u5982 TLS 1.0 \u548c TLS 1.1&#xff09;&#xff0c;\u53ef\u4ee5\u663e\u8457\u63d0\u5347\u670d\u52a1\u5668\u7684\u5b89\u5168\u6027\u3002\u4ee5\u4e0b\u662f\u6574\u4e2a\u6d41\u7a0b\u7684\u5173\u952e\u70b9\u56de\u987e&#xff1a;<\/p>\n<h4>1. \u5728\u9e92\u9e9f Linux \u4e0a\u751f\u6210\u81ea\u7b7e\u8bc1\u4e66<\/h4>\n<ul>\n<li>\u5b89\u88c5 OpenSSL&#xff1a;\u786e\u4fdd\u7cfb\u7edf\u4e2d\u5b89\u88c5\u4e86\u6700\u65b0\u7248\u672c\u7684 OpenSSL\u3002<\/li>\n<li>\u751f\u6210\u79c1\u94a5&#xff1a;\u4f7f\u7528 openssl genrsa \u547d\u4ee4\u751f\u6210\u79c1\u94a5\u6587\u4ef6\u3002<\/li>\n<li>\u751f\u6210\u81ea\u7b7e\u540d\u8bc1\u4e66&#xff1a;\u4f7f\u7528 openssl req \u547d\u4ee4\u751f\u6210\u81ea\u7b7e\u540d\u8bc1\u4e66\u3002<\/li>\n<li>\u5408\u5e76\u8bc1\u4e66\u548c\u79c1\u94a5&#xff1a;\u5c06\u8bc1\u4e66\u548c\u79c1\u94a5\u5408\u5e76\u4e3a .pem \u6587\u4ef6&#xff0c;\u4fbf\u4e8e\u540e\u7eed\u4f7f\u7528\u3002<\/li>\n<\/ul>\n<h4>2. \u5c06\u8bc1\u4e66\u8f6c\u6362\u4e3a .pfx \u683c\u5f0f<\/h4>\n<ul>\n<li>\u751f\u6210 .pfx \u6587\u4ef6&#xff1a;\u4f7f\u7528 openssl pkcs12 \u547d\u4ee4\u5c06 PEM \u683c\u5f0f\u7684\u8bc1\u4e66\u548c\u79c1\u94a5\u8f6c\u6362\u4e3a .pfx \u6587\u4ef6\u3002<\/li>\n<li>\u4f20\u8f93 .pfx \u6587\u4ef6&#xff1a;\u5c06 .pfx \u6587\u4ef6\u4ece Linux \u670d\u52a1\u5668\u4f20\u8f93\u5230 Windows \u670d\u52a1\u5668\u3002<\/li>\n<\/ul>\n<h4>3. \u5728 IIS \u4e2d\u5bfc\u5165\u8bc1\u4e66<\/h4>\n<ul>\n<li>\u6253\u5f00 IIS \u7ba1\u7406\u5668&#xff1a;\u901a\u8fc7 IIS \u7ba1\u7406\u5668\u5bfc\u5165 .pfx \u6587\u4ef6\u3002<\/li>\n<li>\u7ed1\u5b9a\u8bc1\u4e66\u5230\u7f51\u7ad9&#xff1a;\u5c06\u8bc1\u4e66\u7ed1\u5b9a\u5230\u9700\u8981\u4f7f\u7528 HTTPS \u7684\u7f51\u7ad9\u3002<\/li>\n<li>\u9a8c\u8bc1\u914d\u7f6e&#xff1a;\u901a\u8fc7\u6d4f\u89c8\u5668\u8bbf\u95ee\u7f51\u7ad9&#xff0c;\u786e\u4fdd HTTPS \u6b63\u5e38\u5de5\u4f5c\u3002<\/li>\n<\/ul>\n<h4>4. \u542f\u7528\u66f4\u5b89\u5168\u7684\u52a0\u5bc6\u534f\u8bae<\/h4>\n<ul>\n<li>\u4fee\u6539\u6ce8\u518c\u8868&#xff1a;\u901a\u8fc7\u6ce8\u518c\u8868\u7f16\u8f91\u5668\u542f\u7528 TLS 1.2 \u548c TLS 1.3&#xff0c;\u7981\u7528 TLS 1.0 \u548c TLS 1.1\u3002<\/li>\n<li>\u91cd\u542f\u670d\u52a1\u5668&#xff1a;\u91cd\u542f\u670d\u52a1\u5668\u4ee5\u4f7f\u6ce8\u518c\u8868\u66f4\u6539\u751f\u6548\u3002<\/li>\n<li>\u9a8c\u8bc1\u914d\u7f6e&#xff1a;\u4f7f\u7528 SSL Labs \u6216 OpenSSL \u5de5\u5177\u9a8c\u8bc1\u670d\u52a1\u5668\u662f\u5426\u542f\u7528\u4e86\u5b89\u5168\u7684\u52a0\u5bc6\u534f\u8bae\u3002<\/li>\n<\/ul>\n<h4>5. \u7981\u7528\u4e0d\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6<\/h4>\n<ul>\n<li>\u4fee\u6539\u6ce8\u518c\u8868&#xff1a;\u7981\u7528\u4e0d\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6&#xff08;\u5982 RC4\u3001DES \u7b49&#xff09;\u3002<\/li>\n<li>\u542f\u7528\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6&#xff1a;\u901a\u8fc7 IIS \u914d\u7f6e\u6587\u4ef6\u542f\u7528\u66f4\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6&#xff08;\u5982 AES&#xff09;\u3002<\/li>\n<li>\u9a8c\u8bc1\u52a0\u5bc6\u5957\u4ef6&#xff1a;\u4f7f\u7528 SSL Labs \u6216 OpenSSL \u5de5\u5177\u9a8c\u8bc1\u670d\u52a1\u5668\u662f\u5426\u542f\u7528\u4e86\u5b89\u5168\u7684\u52a0\u5bc6\u5957\u4ef6\u3002<\/li>\n<\/ul>\n<h4>\u5173\u952e\u70b9\u56de\u987e<\/h4>\n<li>\u5b89\u5168\u6027&#xff1a;\u59cb\u7ec8\u4f7f\u7528\u6700\u65b0\u7684 OpenSSL \u7248\u672c&#xff0c;\u5e76\u786e\u4fdd\u751f\u6210\u7684\u8bc1\u4e66\u548c\u79c1\u94a5\u5b89\u5168\u5b58\u50a8\u3002<\/li>\n<li>\u8bc1\u4e66\u4fe1\u4efb&#xff1a;\u81ea\u7b7e\u540d\u8bc1\u4e66\u5728\u6d4f\u89c8\u5668\u4e2d\u4f1a\u663e\u793a\u5b89\u5168\u8b66\u544a&#xff0c;\u53ef\u4ee5\u901a\u8fc7\u5c06\u6839\u8bc1\u4e66\u5bfc\u5165\u5ba2\u6237\u7aef\u8bbe\u5907\u7684\u53d7\u4fe1\u4efb\u8bc1\u4e66\u5b58\u50a8\u6765\u89e3\u51b3\u3002<\/li>\n<li>\u534f\u8bae\u548c\u52a0\u5bc6\u5957\u4ef6&#xff1a;\u7981\u7528\u4e0d\u5b89\u5168\u7684\u534f\u8bae&#xff08;\u5982 TLS 1.0 \u548c TLS 1.1&#xff09;\u548c\u52a0\u5bc6\u5957\u4ef6&#xff08;\u5982 RC4&#xff09;&#xff0c;\u542f\u7528\u66f4\u5b89\u5168\u7684\u534f\u8bae&#xff08;\u5982 TLS 1.2 \u548c TLS 1.3&#xff09;\u548c\u52a0\u5bc6\u5957\u4ef6&#xff08;\u5982 AES&#xff09;\u3002<\/li>\n<li>\u9a8c\u8bc1\u914d\u7f6e&#xff1a;\u5728\u5b8c\u6210\u914d\u7f6e\u540e&#xff0c;\u4f7f\u7528 SSL Labs \u6216 OpenSSL \u5de5\u5177\u9a8c\u8bc1\u670d\u52a1\u5668\u7684\u5b89\u5168\u6027\u3002<\/li>\n<h4>\u5e38\u89c1\u95ee\u9898\u53ca\u89e3\u51b3\u65b9\u6cd5<\/h4>\n<li>\n<p>\u8bc1\u4e66\u5bfc\u5165\u5931\u8d25&#xff1a;<\/p>\n<ul>\n<li>\u786e\u4fdd .pfx \u6587\u4ef6\u7684\u5bc6\u7801\u6b63\u786e\u3002<\/li>\n<li>\u786e\u4fdd .pfx \u6587\u4ef6\u672a\u635f\u574f&#xff0c;\u53ef\u4ee5\u901a\u8fc7 OpenSSL \u547d\u4ee4\u9a8c\u8bc1&#xff1a;openssl pkcs12 -info -in server.pfx\n <\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u6ce8\u518c\u8868\u4fee\u6539\u540e\u65e0\u6cd5\u542f\u52a8 IIS&#xff1a;<\/p>\n<ul>\n<li>\u786e\u4fdd\u6ce8\u518c\u8868\u8def\u5f84\u548c\u503c\u6b63\u786e\u65e0\u8bef\u3002<\/li>\n<li>\u5982\u679c\u51fa\u73b0\u95ee\u9898&#xff0c;\u53ef\u4ee5\u901a\u8fc7\u6062\u590d\u6ce8\u518c\u8868\u5907\u4efd\u6765\u8fd8\u539f\u8bbe\u7f6e\u3002<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u6d4f\u89c8\u5668\u663e\u793a\u5b89\u5168\u8b66\u544a&#xff1a;<\/p>\n<ul>\n<li>\u5982\u679c\u662f\u81ea\u7b7e\u540d\u8bc1\u4e66&#xff0c;\u53ef\u4ee5\u901a\u8fc7\u5c06\u8bc1\u4e66\u5bfc\u5165\u5ba2\u6237\u7aef\u8bbe\u5907\u7684\u53d7\u4fe1\u4efb\u8bc1\u4e66\u5b58\u50a8\u6765\u89e3\u51b3\u3002<\/li>\n<li>\u5982\u679c\u662f\u751f\u4ea7\u73af\u5883&#xff0c;\u5efa\u8bae\u8d2d\u4e70\u7531\u53d7\u4fe1\u4efb\u7684\u8bc1\u4e66\u9881\u53d1\u673a\u6784&#xff08;CA&#xff09;\u7b7e\u53d1\u7684\u8bc1\u4e66\u3002<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u65e0\u6cd5\u542f\u7528 TLS 1.2 \u6216 TLS 1.3&#xff1a;<\/p>\n<ul>\n<li>\u786e\u4fdd\u670d\u52a1\u5668\u7684\u64cd\u4f5c\u7cfb\u7edf\u652f\u6301\u8fd9\u4e9b\u534f\u8bae\u3002<\/li>\n<li>\u786e\u4fdd\u6ce8\u518c\u8868\u8def\u5f84\u548c\u503c\u6b63\u786e\u65e0\u8bef\u3002<\/li>\n<\/ul>\n<\/li>\n<p>\u901a\u8fc7\u4ee5\u4e0a\u6b65\u9aa4\u548c\u6ce8\u610f\u4e8b\u9879&#xff0c;\u4f60\u53ef\u4ee5\u786e\u4fdd\u5728\u9e92\u9e9f Linux \u7cfb\u7edf\u4e0a\u751f\u6210\u7684\u81ea\u7b7e\u8bc1\u4e66\u80fd\u591f\u5b89\u5168\u5730\u5e94\u7528\u4e8e IIS \u670d\u52a1\u5668&#xff0c;\u5e76\u4e14\u670d\u52a1\u5668\u4f7f\u7528\u4e86\u6700\u65b0\u7684\u52a0\u5bc6\u534f\u8bae\u548c\u52a0\u5bc6\u5957\u4ef6\u3002\u8fd9\u4e0d\u4ec5\u63d0\u9ad8\u4e86\u670d\u52a1\u5668\u7684\u5b89\u5168\u6027&#xff0c;\u4e5f\u786e\u4fdd\u4e86\u7528\u6237\u6570\u636e\u7684\u4fdd\u5bc6\u6027\u548c\u5b8c\u6574\u6027\u3002<\/p>\n<hr \/>\n<p>\u5982\u679c\u4f60\u5728\u5b9e\u65bd\u8fc7\u7a0b\u4e2d\u9047\u5230\u4efb\u4f55\u95ee\u9898&#xff0c;\u6216\u8005\u9700\u8981\u8fdb\u4e00\u6b65\u7684\u5e2e\u52a9&#xff0c;\u8bf7\u968f\u65f6\u544a\u8bc9\u6211&#xff01;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb718\u6b21\uff0c\u70b9\u8d5e31\u6b21\uff0c\u6536\u85cf11\u6b21\u3002**\u6458\u8981\uff1a\u9e92\u9e9f Linux \u751f\u6210\u81ea\u7b7e\u8bc1\u4e66\u5e76\u8f6c\u6362\u4e3a IIS \u517c\u5bb9\u683c\u5f0f \u5728\u9e92\u9e9f Linux \u4e2d\uff0c\u901a\u8fc7 OpenSSL \u751f\u6210\u81ea\u7b7e\u8bc1\u4e66\uff08server.key \u548c server.crt\uff09\uff0c\u5408\u5e76\u4e3a .pem \u6587\u4ef6\uff08server.pem\uff09\uff0c\u518d\u8f6c\u6362\u4e3a .pfx \u683c\u5f0f\uff08openssl pkcs12 -export\uff09\uff0c\u7528\u4e8e IIS \u90e8\u7f72\u3002\u64cd\u4f5c\u6b65\u9aa4\u5305\u62ec\uff1a\u5b89\u88c5 OpenSSL\uff08\u53ef\u9009\u6e90\u7801\u7f16\u8bd1\uff09\u3001\u751f\u6210\u8bc1\u4e66\u3001\u5408\u5e76\u6587\u4ef6\u3001\u8f6c\u6362\u683c\u5f0f\uff0c\u6700\u540e\u5728 IIS \u4e2d\u5bfc\u5165 .pfx \u5e76\u7ed1\u5b9a HTTPS\u3002\u6ce8\u610f\u81ea\u7b7e\u8bc1\u4e66\u7684\u6d4f\u89c8\u5668\u4fe1\u4efb\u95ee\u9898\u53ca\u6709\u6548\u671f\u8bbe\u7f6e\uff0c\u5efa\u8bae\u751f\u4ea7\u73af\u5883\u4f7f_linux \u5bfc\u5165pfx\u8bc1\u4e66<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[130,58,43],"topic":[],"class_list":["post-47315","post","type-post","status-publish","format-standard","hentry","category-server","tag-chrome","tag-linux","tag-43"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u7528Linux\uff08\u9e92\u9e9f\uff09\u670d\u52a1\u5668\u81ea\u7b7e\u8bc1\u4e66\uff0c\u751f\u6210IIS\u8bc1\u4e66\u53caPEM\u8bc1\u4e66\u8be6\u7ec6\u5168\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/47315.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u7528Linux\uff08\u9e92\u9e9f\uff09\u670d\u52a1\u5668\u81ea\u7b7e\u8bc1\u4e66\uff0c\u751f\u6210IIS\u8bc1\u4e66\u53caPEM\u8bc1\u4e66\u8be6\u7ec6\u5168\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb718\u6b21\uff0c\u70b9\u8d5e31\u6b21\uff0c\u6536\u85cf11\u6b21\u3002**\u6458\u8981\uff1a\u9e92\u9e9f Linux \u751f\u6210\u81ea\u7b7e\u8bc1\u4e66\u5e76\u8f6c\u6362\u4e3a IIS \u517c\u5bb9\u683c\u5f0f \u5728\u9e92\u9e9f Linux \u4e2d\uff0c\u901a\u8fc7 OpenSSL \u751f\u6210\u81ea\u7b7e\u8bc1\u4e66\uff08server.key \u548c server.crt\uff09\uff0c\u5408\u5e76\u4e3a .pem \u6587\u4ef6\uff08server.pem\uff09\uff0c\u518d\u8f6c\u6362\u4e3a .pfx \u683c\u5f0f\uff08openssl pkcs12 -export\uff09\uff0c\u7528\u4e8e IIS \u90e8\u7f72\u3002\u64cd\u4f5c\u6b65\u9aa4\u5305\u62ec\uff1a\u5b89\u88c5 OpenSSL\uff08\u53ef\u9009\u6e90\u7801\u7f16\u8bd1\uff09\u3001\u751f\u6210\u8bc1\u4e66\u3001\u5408\u5e76\u6587\u4ef6\u3001\u8f6c\u6362\u683c\u5f0f\uff0c\u6700\u540e\u5728 IIS \u4e2d\u5bfc\u5165 .pfx \u5e76\u7ed1\u5b9a HTTPS\u3002\u6ce8\u610f\u81ea\u7b7e\u8bc1\u4e66\u7684\u6d4f\u89c8\u5668\u4fe1\u4efb\u95ee\u9898\u53ca\u6709\u6548\u671f\u8bbe\u7f6e\uff0c\u5efa\u8bae\u751f\u4ea7\u73af\u5883\u4f7f_linux \u5bfc\u5165pfx\u8bc1\u4e66\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/47315.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-29T23:22:02+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/47315.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/47315.html\",\"name\":\"\u7528Linux\uff08\u9e92\u9e9f\uff09\u670d\u52a1\u5668\u81ea\u7b7e\u8bc1\u4e66\uff0c\u751f\u6210IIS\u8bc1\u4e66\u53caPEM\u8bc1\u4e66\u8be6\u7ec6\u5168\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2025-07-29T23:22:02+00:00\",\"dateModified\":\"2025-07-29T23:22:02+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/47315.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/47315.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/47315.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u7528Linux\uff08\u9e92\u9e9f\uff09\u670d\u52a1\u5668\u81ea\u7b7e\u8bc1\u4e66\uff0c\u751f\u6210IIS\u8bc1\u4e66\u53caPEM\u8bc1\u4e66\u8be6\u7ec6\u5168\u6d41\u7a0b\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u7528Linux\uff08\u9e92\u9e9f\uff09\u670d\u52a1\u5668\u81ea\u7b7e\u8bc1\u4e66\uff0c\u751f\u6210IIS\u8bc1\u4e66\u53caPEM\u8bc1\u4e66\u8be6\u7ec6\u5168\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/47315.html","og_locale":"zh_CN","og_type":"article","og_title":"\u7528Linux\uff08\u9e92\u9e9f\uff09\u670d\u52a1\u5668\u81ea\u7b7e\u8bc1\u4e66\uff0c\u751f\u6210IIS\u8bc1\u4e66\u53caPEM\u8bc1\u4e66\u8be6\u7ec6\u5168\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb718\u6b21\uff0c\u70b9\u8d5e31\u6b21\uff0c\u6536\u85cf11\u6b21\u3002**\u6458\u8981\uff1a\u9e92\u9e9f Linux \u751f\u6210\u81ea\u7b7e\u8bc1\u4e66\u5e76\u8f6c\u6362\u4e3a IIS \u517c\u5bb9\u683c\u5f0f \u5728\u9e92\u9e9f Linux \u4e2d\uff0c\u901a\u8fc7 OpenSSL \u751f\u6210\u81ea\u7b7e\u8bc1\u4e66\uff08server.key \u548c server.crt\uff09\uff0c\u5408\u5e76\u4e3a .pem \u6587\u4ef6\uff08server.pem\uff09\uff0c\u518d\u8f6c\u6362\u4e3a .pfx \u683c\u5f0f\uff08openssl pkcs12 -export\uff09\uff0c\u7528\u4e8e IIS \u90e8\u7f72\u3002\u64cd\u4f5c\u6b65\u9aa4\u5305\u62ec\uff1a\u5b89\u88c5 OpenSSL\uff08\u53ef\u9009\u6e90\u7801\u7f16\u8bd1\uff09\u3001\u751f\u6210\u8bc1\u4e66\u3001\u5408\u5e76\u6587\u4ef6\u3001\u8f6c\u6362\u683c\u5f0f\uff0c\u6700\u540e\u5728 IIS \u4e2d\u5bfc\u5165 .pfx \u5e76\u7ed1\u5b9a HTTPS\u3002\u6ce8\u610f\u81ea\u7b7e\u8bc1\u4e66\u7684\u6d4f\u89c8\u5668\u4fe1\u4efb\u95ee\u9898\u53ca\u6709\u6548\u671f\u8bbe\u7f6e\uff0c\u5efa\u8bae\u751f\u4ea7\u73af\u5883\u4f7f_linux \u5bfc\u5165pfx\u8bc1\u4e66","og_url":"https:\/\/www.wsisp.com\/helps\/47315.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2025-07-29T23:22:02+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"6 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/47315.html","url":"https:\/\/www.wsisp.com\/helps\/47315.html","name":"\u7528Linux\uff08\u9e92\u9e9f\uff09\u670d\u52a1\u5668\u81ea\u7b7e\u8bc1\u4e66\uff0c\u751f\u6210IIS\u8bc1\u4e66\u53caPEM\u8bc1\u4e66\u8be6\u7ec6\u5168\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2025-07-29T23:22:02+00:00","dateModified":"2025-07-29T23:22:02+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/47315.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/47315.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/47315.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u7528Linux\uff08\u9e92\u9e9f\uff09\u670d\u52a1\u5668\u81ea\u7b7e\u8bc1\u4e66\uff0c\u751f\u6210IIS\u8bc1\u4e66\u53caPEM\u8bc1\u4e66\u8be6\u7ec6\u5168\u6d41\u7a0b"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/47315","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=47315"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/47315\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=47315"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=47315"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=47315"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=47315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}